CVE-2016-8491

Description

The presence of a hardcoded account named core in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.

Risk Information

Base Score
9.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
Exploitation Probability
0.272

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2016-7560 ,CVE-2016-7561 ,CVE-2016-8491 are affected in fortiwlc 8.2-4-0NCM
Use of Hard-coded Credentials Vulnerability (CVE-2016-8491)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234